Re: Share VPN connection
- To: debian-user@lists.debian.org
- Subject: Re: Share VPN connection
- From: Joe <joe@jretrading.com>
- Date: Sun, 1 Dec 2013 09:47:16 +0000
- Message-id: <[🔎] 20131201094716.1f7cc09e@jretrading.com>
- In-reply-to: <CAOsGNST71O=zS3=How-ZW1s=0oEkK-YW2rtVXLhMnsB6ctDSXg@mail.gmail.com>
- References: <04B33A9D-1239-4FE3-9D21-9182EAFA80DD@gmail.com> <529A4386.4010503@tesco.net> <BBBB6B36-C62D-41E4-8571-22378F879E47@gmail.com> <529A53C9.2060400@tesco.net> <CAOsGNST71O=zS3=How-ZW1s=0oEkK-YW2rtVXLhMnsB6ctDSXg@mail.gmail.com>
On Sun, 1 Dec 2013 09:51:04 +1100
Zenaan Harkness <zen@freedbms.net> wrote:
>
> e) be clear on the difference between PTPP tunnelling link,
> unencrypted, which looks acts and quacks like a VPN-duck to the other
> machines on your local LAN, as compared to a true VPN, which also
> encrypts the tunnel.
>
PPTP uses a TCP channel (port 1723) to negotiate and control, and an
encrypted tunnel on IP protocol 47 (Generic Routing Encapsulation) to
carry data, and as far as I am aware, it always has done. There is a
range of encryption and authentication options, which can include
certificates. It has disadvantages compared to IPSec, but it isn't
dependent on endpoint IP addresses, so will pass through layers of NAT
without any faffing about.
--
Joe
Reply to: